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gl TITLE OF THE INVENTION 

^ STORAGE SUBSYSTEM 

BACKGROUND OF THE INVENTION 
5 Field of the Invention 

The present invention relates to a storage subsystem, 
and more particularly to remote copying of a storage subsystem 
for acquiring a write I/O log and a method of restoring a log 
during a disaster. 
10 Description of the Prior Arts 

A computer system has become commercially practical in 
which a computer and a storage system are connected together 
through a network, and data to be processed by the computer 
is transmitted and received via the network and is stored in 
15 the storage system. In online processing and batch processing 
that are to be carried out by the computer system, there may 
enter a situation in which these processing abnormally 
terminates by program bugs, failure of the storage system and 
the like to cause contradictions in the data stored in the storage 
20 system. Also, the data stored in the storage system may be 
erased by an artificial mistake. 

In order to recover data of the computer system which 
has entered such a state , there is known a data recovery technique 
by way of backup and restoration of data as one of techniques 
25 for resuming processing suspended halfway by getting rid of 
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the data contradiction, or doing over the processing suspended 
halfway again. 

As conventional technique concerning the backup and 
restoration, in, for example, U.S. Patent No. 5,263,154 (Patent 
5 Reference 1), there has been disclosed a technique in which 
data stored in the storage system at a point of time designated 
by the user is reproduced (hereinafter, referred to as "backup 
of data") on a magnetic tape without stopping input and output 
(hereinafter, referred to as "I/O") of data from a host connected 

10 to the storage system, and through the use of the data thus 
reproduced (hereinafter, referred to as "backup data"), the 
data is recovered (hereinafter, referred to as "restore"). 

Also, in Japanese Published Unexamined Patent 
Application No. 2001-216185 (Patent Reference 2), in order to 

15 shorten time required to restore the data, there has been 
disclosed a technique in which information in a place where 
the data has been updated is retained as difference information 
after backup of the data is carried out, and when data stored 
in the storage system is restored with the backup data, only 

20 a portion of the backup data shown by the difference information 
is used to restore the data. 

Also, in U.S. Patent Nos . 5,544,347 (Patent Reference 
3 ) and 5,742,792 ( Patent Reference 4 ) , there has been disclosed 
a technique for copying data by a remote storage system 

25 independently of the host. According to this technique, it 



is possible to make a copy of a business volume within the storage 
system which has been made by the host at a certain business 
site on a volume within the storage system at a remote site. 
For that reason, in consideration of a case where the business 
5 site suffers from a natural disaster and terrorism, the computer 
system causes an failure and the business cannot be continued, 
it is possible to prepare data for restoring the business at 
a remote site. 

10 SUMMARY OF THE INVENTION 

In the restoration processing described in Patent 
Reference 1, when reading out backup data from a magnetic tape, 
a portion which has not been updated from a point of time whereat 
the backup data has been acquired (that is, a portion in which 

15 the data of the storage system coincides with the content of 
data of the magnetic tape) is also read out from the magnetic 
tape, and is written in the storage system. It is wasteful 
to transfer such data, and it takes longer time to restore. 

In the technique disclosed in Patent Reference 2, time 

20 to restore becomes short by an amount corresponding to readout 
of overlapped data which does not occur as compared with the 
technique of Patent Reference 1 . As regards data which has 
been updated during a period of time from a time at which backup 
of data is carried out to a time at which the storage system 

25 develops a failure, however, the data cannot be restored by 
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either technique . When an attempt is made to restore data which 
has been updated after backup of data is carried out, it is 
necessary for the host side to manage the content of update 
of the data and the like by the log and the like. For this 
5 reason, load on the host is great and it takes a long time to 
process . 

Also, in Patent References 3 and 4, there has been 
disclosed the technique for creating data for restoring the 
business at a remote site on the assumption that the business 

10 site suffers from a disaster, and the computer system develops 
a failure and the business cannot be continued, but no 
consideration has been given to a measure against danger of 
copying at a remote site concerning unfair writing which is 
caused by writing during the disaster. 

15 It is an object of the present invention to provide a 

computer system capable of restoring data at any given time 
prior to occurrence of the failure at high speed. 

It is an object of the present invention to provide a 
storage system for restoring data at a remote site without 

20 imposing a burden on the host when restoring the data stored 
in the storage system. 

The present invention is preferably realized by a storage 
subsystem including a first storage system and a second storage 
system, each of which is connected to a host via a communication 

25 channel, in which the second storage system stores a copy of 
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data to be transmitted from the first storage system. In this 
storage subsystem, the first storage system processes an I/O 
request from the host, and as a result of the I/O processing 
to the second storage system, transmits updated data, and the 
5 second storage system retains data received from the first 
storage system as update log data. The host transmits a command 
for settling a state of an application to the first storage 
system as data, and the first storage system transmits the data 
to the second storage system. The host and the second storage 

10 system both retain an identifier corresponding to the command, 
and relate the identifier to the log data. When restoring the 
data to its original state, the host designates the identifier 
at any given time, whereby the second storage system restores 
data at any given time. 

15 In a preferred example , the host issues an I/O instruction 

of state identification information to the second storage system 
at a remote site. The second storage system at the remote site 
receives the I/O instruction of the state identification 
information of the host, and relates the updated log of data 

20 to the identification information to store it in a storage unit . 

According to the present invention, when restoring the 
data stored in the storage system, it is possible to 
restore data to its predetermined state at a remote site without 
imposing any burden on the host within a short time. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 is a block diagram showing structure of a computer 
system according to one embodiment; 

FIG. 2 is a block diagram showing structure of storage 
5 systems 3 and 4; 

FIG. 3 is a block diagram showing structure of a host 

1; 

FIG. 4 is a view showing structure of a table of storage 
management information 115, 150; 
10 FIG. 5 is a view showing structure of a table of storage 

configuration information 116, 151; 

FIG. 6 is a view showing structure of a table of volume 
configuration information 117, 152; 

FIG. 7 is a view showing structure of a table of pair 
15 management information 118, 153; 

FIG. 8 is a view showing structure of a table of log volume 
group information 110; 

FIG. 9 is a view showing structure of a table of volume 
pool configuration information 156; 
20 FIG. 10 is a view showing structure of a table of log 

volume quantity consumed pool management information 155; 

FIG. 11 is a view showing structure of a table of log 
ID management information 157; 

FIG. 12 is a view showing structure of a table of mark 
25 ID management information 158; 



FIG. 13 is a view showing a format of log data; 

FIG. 14 is a view showing a flowchart to be used for 
explaining a processing operation of creating a pair; 

FIG. 15 is a view showing a flowchart to be used for 
explaining a command processing operation while a pair is being 
created; 

FIG. 16 is a view showing a flowchart for a log acquisition 
commencement processing operation on the master side; 

FIG. 17 is a view showing a flowchart for a log acquisition 
commencement processing operation on a remote side; 

FIG. 18A is a view showing a flowchart (host side) of 
a mark command processing operation; 

FIG. 18B is a view showing a flowchart (storage system 
3 side) of a mark command processing operation; 

FIG. 19 is a view showing a flowchart for command 
processing while the log is being acquired at a remote site; 

FIG. 20 is a view showing a flowchart for a log data creating 
operation at a remote site; 

FIG. 21 is a view showing a flowchart for an excessive 
log volume capacity processing operation; 

FIG. 22 is a view showing a flowchart for take over 
processing; and 

FIG. 23 is a view showing a flowchart for recovery 
processing. 



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Hereinafter, with reference to the drawings, the 
description will be made of one embodiment of the present 
invention . 

5 FIG. 1 is a block diagram showing a computer system 

according to one embodiment. 

This computer system includes a first host computer 1 
(hereinafter, referred to as host 1), a second host computer 
2 (hereinafter, referred to as host 2) , a first storage system 

10 3 (hereinafter, referred to as storage system 3 simply) to be 
connected to the host 1 via a communication channel 5, a second 
storage system 4 (hereinafter, referred to as storage system 
4 simply) to be connected to the host 2 via a communication 
channel 7 and to be connected to the storage system 3 via a 

15 communication channel 6, a first storage system management unit 
8 to be connected to the storage system 3 via a communication 
channel 11, a second storage system management unit (hereinafter, 
referred to as management unit) 9 to be connected to the storage 
system 4 via a communication channel 12, and a computer system 

20 management unit 13 to be connected to these structural units 
via a communication channel 10. The storage system 3, 4 is 
constructed by including such storage units 21, 22, 23 as, for 
example , a disk device and a disk array , and their control units . 
In this case, the second system side is positioned as a remote 

25 site. 
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The host 1 and the host 2 are computers such as personal 
computers, work stations and main f rames . In the host 1, there 
are carried out operating systems (OS) corresponding to type 
of the computer, and various application programs (AP) 
5 corresponding to various business and use applications such 
as, for example, data base (DB) programs. In this respect, 
in this example, one each of the host 1 and host 2 is shown 
for the sake of simplicity, but a plurality of hosts 1 or hosts 

2 to be connected to the communication channel 5 or the 
10 communication channel 7 may be provided. 

The host 1 performs the predetermined processing in the 
computer system. In other words, the host 1 communicates 
commands and data required for I/O processing concerning 
information processing with the storage system 3 through the 
15 use of the communication channel 5, requests the storage system 

3 to write the data created and changed in the host 1, and also 
requests to read data required for computer processing. 

The storage system 3 receives commands and data to be 
transmitted via the communication channel 5 to conduct 
20 predetermined processing, and carries out a predetermined 
response to the host 1. The storage system 3 and the storage 
system 4 communicate commands and data between them via the 
communication channel 6 . 

Although the storage system 4 is actually the same in 
25 structure as the storage system 3, they are different in FIG. 



1 in that the storage system 4 has a plurality of storage units 
22 and 23. Although it will be described in detail later, of 
those two storage units, one storage unit 22 is used as a mirror 
of the storage unit 21 , and the other is used for log data storage . 
5 The management unit 8 is a computer for managing a failure , 

maintenance, structure, performance information and the like 
of the storage system 3 in addition to setting of the storage 
system 3. Similarly, the management unit 9 is a computer for 
setting the storage system 4 and also managing a failure, 

10 maintenance, structure, performance information and the like 
of the storage system 4. When, for example, the manager of 
the computer system sets such a logical storage unit as, for 
example, volume on the storage system 3 and the storage system 
4, when setting a storage area for backing up the data, or when 

15 setting a pair of storage area when reproducing data, these 
management units 8 and 9 are used. 

When maintaining and managing the storage system 3, 
setting a physical storage unit which the storage system 3 has, 
and setting the host 1 to be connected to the storage system 

20 3, the system manager inputs contents that should be set on 
the management unit 8. The contents that the system manager 
has inputted to the management unit 8 are transmitted to the 
storage system 3 and the host 1 via the communication channel 
11, 10. 

25 The computer system management unit 13 is used to maintain 
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and manage the entire computer system, and is normally operated 
and utilized by the system engineer. 

The communication channels 5 and 7 are used for the host 
1 and the host 2 to transmit a request for processing I/O and 
5 the like to the storage system 3 and the storage system 4 
respectively. The communication channel 6 is used to transmit 
the request for processing I/O and the like between the storage 
system 3 and the storage system 4. For the communication 
channels 5, 6 and 7, there are used optical cable, copper wire 
10 and the like . Examples of communication protocols for use with 
these communication channels 5, 6 and 7 include, for example, 
Ethernet, FDDI , fiber channel , SCSI, Infiniband, TCP/IP, iSCSI 
and the like . 

Communication channels 11 and 12 are used for the storage 
15 system 3 or 4 to transfer management information such as its 
own failure, maintenance, structure, and performance between 
those management units 8 and 9. 

The communication channel 10 is used to transfer a command 
when the host 1, 2 acquires management information from the 
20 management units 8, 9, and to transmit management information 
of failure, maintenance, structure, performance and the like 
of the storage system 3, 4 to the host 1 from the management 
units 8,9. Cable and communication protocol for use with the 
communication channels 10 , 11 , 12 may be the same as or different 
25 from the communication channels 5, 6, 7. 



FIG. 2 is a view showing the structure of the storage 
systems 3,4. 

The storage system 3 is made up of a storage system control 
unit 101 and a storage unit 21 , and a storage area of the storage 
5 unit 21 is provided to input and output from the host 1. In 
other words, the storage system 3 stores data and programs that 
the host 1 uses, receives an I/O processing request from the 
host 1 , performs processing corresponding to the I/O processing 
request, and transmits the result to a predetermined host 1. 

10 The storage control unit 101 has a storage adapter 108 

to be connected to the storage unit 21, a processor 105 for 
executing a predetermined program, a program to be executed 
by the processor 105 , a non- volatile control memory 107 in which 
information required in an operation of the program such as 

15 setting information, structural information and the like of 
the storage system 3 is stored, a network adapter 102 for 
connecting this storage system 3 to the communication channel 
11, a host adapter 103 for connecting to the communication 
channel 5, and a remote I/O adapter 104 for connecting to the 

20 communication channel 6, and performs processing of the I/O 
request from the host 1 and control of the storage unit 21. 

The storage unit 21 is made up of a plurality of logical 
storage units 109, each of which is referred to as "volume", 
and in each of the respective storage units 109, there is stored 

25 data for an user. The storage unit 21 is preferably configured 
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to have RAID (Redundant Arrays of Inexpensive Disks) 
configuration having redundancy. As a storage medium of the 
storage unit 21, there are used media such as a silicon disk, 
an optical disk, an optical magnetic disk or a hard disk which 
5 are constructed by a magnetic disk and a nonvolatile 

semiconductor memory which are, for example, electrically 
nonvolatile storage media. 

In this respect, a plurality of storage control units 
101 may be present in the storage system 3. Also, in order 

10 to secure the redundancy of the storage system 3 , it is advisable 
to redundant -construct a circuit for supplying power supply 
to each component element within the storage control unit 101, 
a circuit for transmitting and receiving data between each 
component element within the storage control unit 101, a cache 

15 memory 106, the non-volatile control memory 107, the storage 
adapter 108 and the like by making each of them duplex. 

In order to control processing within the storage system 
3, the non-volatile memory 107 stores therein each program of 
a command processing program 111 , aremote I/O processing program 

20 112 , a copy manager program 113 , a pair management program 114 , 
a network processing program 119, a storage I/O processing 
program 121 , and a system configuration management program 122 . 
The non-volatile memory 107 stores an exclusive processing pit 
for accessing to an area in which there is the cache memory 

25 106, and information indicating correspondence relationship 



between the storage unit 109 and the cache memory 107 therein 
for the I/O processing. In this respect, if there exist a 
plurality of storage control units 101 and processors 105 , it 
is possible to have the non-volatile control memory 107 in 
5 common . 

The cache memory 106 temporarily stores data to be 
transferred from the host 1 to the storage system 3 or data 
to be transferred to the host 1 from the storage system 3. 

A local area network 120 causes the storage control unit 

10 101, the cache memory 106 and the storage unit 109 to connect 
together to one another. The local area network 120 may be, 
for example, of a shared bus type configuration, and also of 
a star type and other network configuration. 

The storage control unit 101 controls processing to be 

1 5 explained below by executing a program stored in the non- volatile 
memory 107 by the processor 104. 

On receipt of the I/O processing request from the host 
1 by the host adapter 102, the command processing program 111 
analyzes content of the I/O processing request received. In 

20 accordance with the analysis result, the content of the I/O 
processing request executes readout I/O (hereinafter, referred 
to as "read I/O") of data, write I/O (hereinafter, referred 
to as "write I/O") processing request of data and the like. 
In the case of the write I/O processing request, the storage 

25 control unit 101 performs response processing to the write I/O 
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processing request from the host 1, such as response processing 
whether or not it is in a state capable of receiving data to 
be actually transferred from the host 1, and further writes 
data for update (hereinafter, referred to as "write data") to 
5 be transferred in a place designated of the cache memory 106 
or the storage unit 109 . In the case of the read I/O processing 
request , the storage control unit 101 reads out data ( hereinafter , 
referred to as "read data") corresponding to the read I/O 
processing request from a place designated of the cache memory 

10 106 or the storage unit 109 to transfer to the host 1. Also, 
when other processing, for example, input and output I/F with 
the host is SCSI and an inquiry command (command for instructing 
device search) is received, the host I/O processing program 
controls an operation corresponding to the content of processing 

15 to be requested by the command . 

The system configuration management program 122 is a 
program to be executed when the storage control unit 101 manages 
the storage system 3, and prepares, sets, changes, and deletes 
storage unit management information 115, 116. By executing 

20 the system configuration management program 122, the storage 
control unit 101 performs definition of the storage unit 109 
to be inputted from the management unit 8 , setting of the storage 
unit 109 which becomes a pair target for backup/snap shot, 
registration of information targeted for log storing and the 

25 like. In this case, the storage unit management information 
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115, 116 retains mapping information indicating correspondence 
relationship between address within the storage system and 
address for performing input to and output from the host storage 
unit, and information concerning the pair 118. 
5 The storage I/O processing program 121 is a program to 

be executed when the storage control unit 101 performs read 
and write processing to the cache memory 106 or the storage 
unit 109. On executing a read-write I/O processing request, 
the system configuration management program 122 is executed 

10 to check the storage unit 109 at the access target for structure , 
it is calculated to which address in the storage unit 109 address 
at a place where read or write data which is designated by the 
read- write I/O processing request should be read out or stored 
corresponds, and on the basis of the calculation result, access 

15 to the storage unit 109 is performed. 

The pair management program 114 is a program for managing 
a pair of a master volume (hereinafter, referred to as "M-VOL" ) 
and a remote volume (hereinafter, referred to as "R-VOL" ) . By 
executing the pair management program 114, the storage control 

20 unit 101 processes pair creation (Pair Create) , pair suspension 
(Pair Suspend) , pair resumption , and pair deletion (Pair Delete) 
concerning a storage unit ( "R-VOL" ) 139 within the storage unit 
22 which is located within the remote storage system 4 in which 
a reproduction of data stored in a certain storage unit 109 

25 ("M-VOL") and M-VOL109 is stored in accordance with an 
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instruction from the host 1. 

In this respect, it is also possible to set a plurality 
of R-VOLs against one M-VOL for creating. Also, it is also 
possible to set and create a R-VOL which makes a pair with a 
5 new M-VOL with the R-VOL as a new M-VOL. 

The pair management information 118 registers 
information indicating whether or not a certain M-VOL109 is 
in a pair state (Pair Duplex), in a pair created state (Pair 
Create) and in a pair suspended state (Pair Suspend). 

10 By executing the copy manager program 113, the storage 

control unit 101 copies data on the R-VOL in order from the 
head address of the M-VOL139 during pair creation, whereby data 
stored in the M-VOL is backed up in the R-VOL. Further, the 
storage control unit 101 gives an instruction to the remote 

15 I/Os processing program 112 to copy data in a portion having 
a difference from M-VOL to R-VOL by referring to difference 
information 123 , and to conversely copy data having a difference 
from R-VOL to M-VOL by referring to the difference information 
123. In this case, the difference information 123 is a bit 

20 map provided correspondingly to the storage area of the storage 
unit 109 in order to prevent copy data of M-VOL and R-VOL from 
disagreeing with each other, and when data of the storage area 
of the storage unit 109 is rewritten after remote-copied, a 
bit flag will be set correspondingly to the area thus updated 

25 for management . 
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Also, the pair management program 114 restores data of 
the storage unit 109 designated in accordance with a restore 
request from the host 1 . In this respect , details of the restore 
processing will be described later. 
5 In the foregoing, the description has been made of the 

structure of the storage system 3 on the master site side. 

On the other hand, the storage system 4 on the remote 
site side also has the similar program and information basically . 
Major points of difference will be described. The storage unit 

10 22 stores copy data of the storage unit 21 on the master site 
side while the storage unit 23 stores log data that occurred 
on the master site side. The log data that occurred on the 
master site side may be stored in the storage unit on the master 
side as a matter of course, and in the example shown in FIG. 

15 2 , the structure is arranged such that the log data is transmitted 
to the remote storage system 4 via the communication channel 
6 to store in a logic storage unit 140 within the storage unit 
23. In this respect, the structure of logic storage unit 
(volume) 139, 140 within the storage unit 22, 23 is similar. 

20 As regards information to be stored in the non-volatile 

memory 137, each program of a command processing program 142, 
a remote I/O processing program 143, a copy manager program 
144, a pair management program 145, a network processing program 
159, a storage unit I/O processing program 162, and a system 

25 configuration management program 163, storage unit management 
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information 150, 151, volume configuration information 152, 
pair management information 153, difference information 164 
and the like are similar to the program or information on the 
master site side corresponding thereto. 

In order to perform a characteristic operation of storing 
log data and its management information in the storage unit 
23 at a remote site and restoring the log data on the basis 
of the management information, however, in the non- volatile 
memory 137, there are stored a log volume group management 
program 146, a quantity consumed management program 147, a log 
ID management program 148, a Mark ID management program 149, 
log volume group configuration information 154, log volume group 
quantity consumed management information 155, volume pool 
configuration information 156, log ID management information 
157, and Mark ID management information 158. Functions and 
meaning of these programs and information will be explained 
in order hereinafter. 

Next, with reference to FIG. 3, the description will be 
made of the structure of the host 1. 

The host 1 will be exemplified for description, and the 
structure of the host 2 is actually similar to the host 1. 

The host 1 is configured to have a processor 201 for 
executing a predetermined program; a memory 202 to be used for 
storing OS, AP and data to be used by the AP; a disk unit 207 
in which OS, AP and data to be used by the AP are stored; an 
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I/O adapter 205 for connecting to a communication channel 5; 
a network adapter 206 for connecting to a communication channel 
10; a removable storage drive unit 209 for controlling readout 
and the like of data from a portable storage medium such as 
5 afloppydisk; adisplayunit 203 such as a liquid crystal display ; 
an input device 20 4 such as a keyboard and a mouse; and a local 
I/O network 208 to be used for transferring data of OS and AP 
and control data by connecting these configuration units 
together, 

10 Examples of the portable storage media for use with the 

removable storage drive unit 209 include optical disks such 
as CD-ROM, CD-R, CD-RW, DVDandMO, magnetic disks such as optical 
magnetic disks, hard disks and floppy disks, and the like. In 
this respect, each program to be explained below is installed 

15 in the disk unit 207 of the host 1 by being read out from the 
portable storage medium via the removable storage drive unit 
209 or by passing through the network 4 or 5 . In this respect, 
the host 1 may have a plurality of configuration units such 
as the processor 201 in order to secure the redundancy. 

20 Next, the description will be made of an example of a 

program to be executed by the host 1. 

These programs 210 are stored in the disk unit 207 of 
the host 1 or the memory 202, and are executed by the processor 
201. 

25 The host 1 has AP 233 for operating under OS230, and data 
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base management software (hereinafter, referred to as "DBMS") 
232. The DBMS232 accesses the storage system 3 via the OS230, 
a file system (FS) 231, a volume manager (VM) 235 and the like. 
Also, the DBMS232 communicates I/O processing of transaction 
5 processing and the like with another AP 233 which the user uses . 
With the objective of improving the information processing 
performance, the processor 201 executes information processing 
through the use of a memory 202 of the host 1. 

Also , information having correlation between a plurality 

10 of logical storage units which the host 1 performs input and 
output is retained as log volume group management information 
248. Also, the pair management information 249 retains M-VOL 
which is a logical storage unit in which the host 1 performs 
input and output, and management information of R-VOL which 

15 makes a pair therewith. A pair operating program 247 performs 
pair operation, pair creation (Pair Create), pair suspension 
(Pair Suspend), pair resumption and pair deletion (Pair Delete) 
on the storage system 3. A log operating program 246 performs 
a log operation such as log acquisition commencement and log 

20 acquisition completion . A pair management program 245 monitors 
a pair state of the storage system 3 and monitors for a failure. 
A capacity management program 244 retains the capacity of the 
storage system 3 as information, and calculates the total 
capacity of the logical storage unit to be contained in the 

25 log volume group . A mark processing program 243 is called after 
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commitment processing when AP 233 or DBMS232 saves or closes 

a file, creates mark data and writes on the storage system 3. 

A mark ID management program 242 creates mark data through the 

use of a timer and mark ID information 241 when a mark processing 
5 program 243 writes mark data, Mark ID information 241 is 

management information against the log ID, and is made up of 

mark ID and log time information. 

Next, with reference to FIGS. 4 and 5, the description 

will be made of storage unit management information 115, 150 
10 and storage management information 116, 151. In this respect, 

symbols on the storage system 3 side will be referred to for 

the description. 

In FIG. 4, storage unit management information 115 is 

a table having an entry 301 for creating an address concerning 
15 a storage unit 21 to be provided for the host 1, and an entry 

302 for creating a logical address for identifying storage units 

21 in the storage system 3 in a unified way. 

The entry 301 has an entry 303 for creating an identifier 

of a storage unit to be provided for a host computer and an 
20 entry 304 for creating its internal address. Also, the entry 

302 has an identifier 305 of the logical storage unit 109 within 

the storage unit 21 for identifying the storage units in a 

unified way in the storage system 3 , and an entry 306 for creating 

its internal address. 
25 In FIG. 5, storage management information 116 is a table 
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having an entry 401 for registering a logical address for 
identifying storage units 21 within the storage system 3 in 
a unified way, an entry 402 for registering an address concerning 
RAID Group, and an entry 403 for registering an address 
5 concerning a disk which constitute the RAID Group. 

Further, the entry 401 has an entry 404 for registering 
a logical storage number which identifies, in a unified way, 
logical storage units 109 within the storage system 3, and an 
entry 405 for registering internal addresses corresponding to 

1 0 the storage units . The entry 402 has an entry 406 for registering 
a RAID Group number for identifying, in a unified way within 
the storage system 3, RAID Group in which there are arranged 
logical storage units to be identified by the logical storage 
number which identifies , in a unified way , logical storage units 

15 109 within the storage system 3 , and an entry 407 for registering 
an address corresponding in virtual space in which the RAID 
Group has been handled as one storage area. Also, the entry 
403 has an entry 407 for registering a disk number for identifying , 
in a unified way within the storage system 3, disks which form 

20 the RAID Group , and an entry 408 in which disk internal addresses 
are registered. 

Next, with reference to FIG. 6, the description will be 
made of volume configuration information 117, 152 shown in FIG. 
2 . In this respect , since the volume configuration information 

25 152 is also similar, symbols on the storage system 1 side will 
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be referred to for description. 

The volume configuration information 117 is a table for 
registering information concerning configuration of the volume 
in the storage system 3 . In the entry 501 , there are registered 
5 logical storage numbers which handle logical storage units 
within the storage system 3 in a unified way. On the entry 
502, there are registered host types. In other words, there 
is registered information indicating which storage unit capable 
of being recognized OS of a host for performing input /output 

10 to the logical storage unit emulates, such as "OPEN" indicating 
a storage unit capable of recognizing OS of an open line system, 
and w 3990" indicating a storage unit capable of recognizing 
OS of a main frame system. 

In the entry 503, there is registered pass definition 

15 information indicating whether or not it is related to an I/O 
port so as to allow the host 1 to perform input/output. If, 
for example, the I/O network is FC, there will be registered 
information concerning linking the logical storage unit with 
a port of FC. 

20 The entry 504 is used to register a state of the logical 

storage unit, and there is registered, for example, information 
indicating a normal state (NORMAL) in which the logical storage 
unit develops no failure, but input/output can be performed, 
or information indicating a state (BLOCKED) in which 

25 input/output cannot be performed because of a failure and the 
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like. Further, as failure information, there is registered 
information indicating whether or not the logical storage unit 
has developed some failure or other. In this case, the failure 
includes physical failures of physical storage units mainly 
5 constituting the logical storage unit and logical failures when 
the manager has consciously set the storage system to a blocked 
state. 

The entry 505 is used to register reserved information, 
and there is registered, for example, information indicating 

10 whether or not the logical storage unit is in a reserved state 
in order to store R-VOL or log data. The logical storage unit 
in which reserved information has been registered cannot be 
newly allocated to other use applications, and, for example, 
as a logical storage unit for business use. 

15 When the logical storage unit 109 forms a pair, a pair 

number is registered on the entry 506 for registering pair 
information, and when acquiring log data within the storage 
unit, a log volume group number is registered on the entry 507 
for registering log volume group numbers . If there is effective 

20 information, for example, a log volume number on the entry 506, 
there will be registered information indicating whether or not 
the logical storage unit is a target of log acquisition, that 
is, a target of journal mode. Also, on the entry 508, there 
is registered capacity of the logical storage unit 109. 

25 Next, with reference to FIG. 7, the description will be 
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made of pair management information 118 , 153 . In this respect , 
reference numerals on the pair management information 118 side 
will be referred to. 

The pair management information 118 is a table for 
registering identifiers of the original and duplicate logical 
storage units constituting the pair. In other words, a pair 
number is registered on the entry 601. On the entry 602, there 
is registered a unified logical storage unit (M-VOL) number 
within the storage system 3 on the master side for forming the 
pair. On the entry 603, there is registered information for 
identifying the logical storage unit (R-VOL) located in the 
storage system 4 on a remote side which forms M-VOL and the 
pair. For example, on the entry 603, there are registered an 
identifier of an I/O port to be connected through the 
communication channel 6 and a unified storage number within 
the storage system 4 accessible from this port. On the entry 
604 , there is registered information indicating states of pair, 
such as, for example, pair state, pair being created, pair being 
suspended, and pair being recreated. 

Next, with reference to the drawings of FIG. 8 and 
thereafter, the description will be made of the structure of 
a table peculiar to the storage system 4 on the remote side. 

FIG. 8 is a view showing a configuration of a table of 
log volume group configuration information 154 . The log volume 
group configuration information 154 is prepared for each log 
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volume group- In a column 701, there is stored information 
for identifying each log volume group. In a column 702, there 
is stored the total number of the logical storage units grouped 
into a log volume group. In a column 703, there is stored the 
5 sum total of capacities of the logical storage units grouped 
into the log volume group. 

In a column 704, there are registered identifiers 705 
of logical storage units grouped into a log volume group, host 
types 706, states 707, and capacity 708 corresponding to the 

10 number of logical storage units grouped into a log volume group 
respectively. In a column 709, there is registered a number 
of identifiers of a logical storage unit of volume for a log 
to be used in the log volume group, and in a column 710, there 
is registered the sum total of capacities of logical storage 

15 units of volume for a log to be used in the log volume group. 

In a column 710, there are registered identifiers 711 
of logical storage units of volume for a log to be used in the 
log volume group, host types 712, states 713, and capacities 
714 corresponding to the number of logical storage units of 

20 volume for a log to be used in the log volume group respectively. 

Next, with reference to FIG. 9, the description will be 
made of the configuration of a table of volume pool configuration 
information 156. 

The volume pool configuration information 156 is a table 

25 for collectively managing a logical storage unit in which pass 
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has not been defined in advance and a logical storage unit in 
a reserved state so as to facilitate expanding the capacity 
when the capacity of a storage unit for storing log data to 
be used in the log volume group becomes insufficient. 

In an entry 801, there is registered a logical storage 
number of the storage system 4. In an entry 802, there is 
registered a host type of a logical storage unit which is 
identified by the number of the entry 801. In an entry 803, 
a state of the logical storage unit is likewise registered, 
and in an entry 804, reserve information of the logical storage 
unit is registered . In an entry 805 , the capacity of the logical 
storage unit is registered. 

FIG. 10 shows the configuration of a table of log volume 
group quantity consumed management information 155. 

The log volume group quantity consumed management 
information 1 55 is prepared in order to monitor consumed quantity 
of the storage unit which stores log data for each log volume 
group. In an entry 901, there is registered a log volume group 
number, and in an entry 902, there is registered full free 
capacity within the log volume group. 

In an entry 903, there is stored a number of the logical 
storage unit of volume for a log to be used in the log volume 
group. In an entry 904, there is stored capacity information 
of the logical storage unit to be identified by the entry 901. 
In an entry 905, there is registered capacity of an area used 
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in write I/O. The capacity of this area can be grasped by- 
referring to a table of usage monitor information 908 . In other 
words, the usage monitor information 908 manages a logical 
storage unit 139 of volume for a log with a bit map, and manages 
5 by setting up a bit in an area where there has been write update . 
A bit map of this usage monitor information 908 is stored within 
a non-volatile memory 137 of the storage control unit 131. 

In an entry 906, there is stored remaining capacity 
information which no write update has been performed. In an 
10 entry 907, there is stored information indicating a ratio of 
a free capacity to the total storage capacity of the log volume 
group . 

FIG. 11 shows the configuration of a table of log ID 
management information 157. 

15 The log ID management information 157 is a table for 

managing identification information (ID) to be added to the 
log data when creating a log of the I/O level by receiving update 
data due to the write I/O to be transmitted from the storage 
system 3 by the storage system 4. In other words, the table 

20 of the log ID management information 157 is made up of: an entry 
1001 for storing ID value of the oldest log data for each log 
volume group in order to manage log ID counter added to the 
log data; an entry 1002 for storing time information in which 
the data has been created; an entry 1003 for storing address 

25 information of log volume in which the data has been stored; 
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an entry 1011 for storing ID values of the newest log data; 
an entry 1012 for storing time information in which the data 
has been created; and an entry 1013 for storing address 
information of log volume in which the data has been stored. 
5 When a command to be processed is write I/O or mark I/O 

to a logical storage unit 140 in which the log data is to be 
stored, a command processing program 142 refers to a log ID 
counter 160 and a timer 161 which are to be prepared for each 
log group, and creates log ID management information by adding 

10 a value (log data ID) of the counter 160 and a value (time) 
of the timer 161. 

Next, with reference to FIG. 13, the description will 
be made of a log data format. 

Every time the storage system 4 processes a request for 

15 processing write I/O or mark I/O from the storage system 3, 
log data is created on a cache memory 136, and thereafter is 
stored in the storage unit 140. A mark flag 1201 is added to 
the log data at the head thereof. The mark flag 1201 is an 
identifier for identifying whether or not it is mark information 

20 for uniquely identifying a state of the system by the host 1 
and the storage system 4 . The log data is constituted to have, 
behind the mark flag 1201, respective entries of a log ID (that 
is, value of log ID counter) 1202, a timer value 1203, and a 
data length 1204, and further an entry 1205 in which the write 

25 data or mark data is stored. 
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The mark data is made up of an entry for storing an address 
1210 of log volume which stores log data, an entry when the 
host 1 stores a mark ID 1211, an entry for storing time 1212 
during which the mark has been executed, and an entry in which 
5 identification information 1213 of an application which has 
requested a mark is stored. 

On the other hand, the write data is made up of an entry 
for storing an address 1220 of log volume which stores write 
data, and an entry for storing write data 1221. 
10 In this respect , creation of the log data will be described 

later with reference to FIG. 20. 

Next, with reference to FIG. 12, the description will 
be made of the configuration of a table of MARK ID management 
information 158. 

15 The MARK ID management information 158 is a table for 

managing the MARK ID information, and is figured to have an 
entry 1101 for storing a value of the oldest mark sequence number 
for each log volume group, an entry 1102 for storing time 
information in which the data has been created, an entry 1103 

20 for storing address information of log volume in which the data 
has been stored, an entry 1104 for storing an ID value of the 
most recent mark data, an entry 1105 for storing time information 
in which the data has been created, and an entry 1106 for storing 
address information of log volume in which the data has been 

25 stored. 
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When the host 1 receives a mark command to be transmitted, 
a command processing program 111 uses this mark command to 
receive the mark information transmitted to the storage system 
3, If it is the mark command, the mark information will be 
5 converted to log data form as shown in FIG. 20, and on that 
occasion, a mark ID 1211 within the data will be read out and 
stored on the table for management. 

Next, with reference to the flowchart, the description 
will be made of the respective processing operations. 
10 First , an outline of the entire processing operation will 

be described. 

In a computer system according to the present embodiment , 
in the storage system 4 , there is created and retained a negative 
logic storage unit (R-VOL) having backup data (hereinafter, 

15 referred to as "snapshot data") of data of a positive logic 
storage unit (M-VOL) of the storage system 3 at any given time. 
At a point of time whereat the snapshot data has been created 
and onward, every time a write I/O processing request to be 
received from the host 1 is executed, update data which has 

20 been produced in the storage system 3 will be transmitted from 
the storage system 3 to the storage system 4 . The storage system 
4 records data (that is, write update data) after write I/O 
processing in a storage unit 23 as log data. 

Further, the host 1 informs the storage system 3 of mark 

25 point information (hereinafter, referred to as "MP 
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information") that is arbitrary information that the host 1 
itself creates, that is, information when a mark is added. 
Specifically, the host 1 writes the MP information in the log 
data of the storage system 4 at any given time, for example, 
when processing (sink processing) for causing data to coincide 
with each other between the storage system 3 and the storage 
system 4 is performed. Therefore, the MP information is to 
be managed by both the host 1 and the storage system 4 . Thereby, 
through the use of the MP information that the host 1 designates 
and the MP information that has been stored in the log data 
within the storage system 4, the storage system 4 can restore 
at high speed data that the storage system 4 has retained since 
the host 1 intended (when MP information has been created) . 

In order to execute such processing, the host 1 transmits 
an instruction to prepare for acquisition of log data 
(instruction of preparation for commencement of log 
acquisition) and an instruction to commence log acquisition 
to the storage system 4 in advance. Thereby, the storage system 
4 commences acquisition of log data to go into a log mode. 
Thereafter, the computer system communicates the 
above-described MP information. 

First, with reference to FIG. 14, the description will 
be made of a processing operation of pair creation. 

The storage system 3 receives a command for instructing 
creation of a pair from the host 1 (1301). Then, a command 
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processing program 111 calls a pair management program 114, 
and delivers content of the command for requesting creation 
of a pair . The pair management program 114 refers to the command 
information and checks a device (storage unit) targeted for 
instructing pair creation( 1302 ) . All bits of a difference 
management bit map 123 for pair management are set to T, a 
pointer for managing progress of copying is prepared in order 
to copy, and the head of a pair management difference bit map 
908 is set (1303, 1304). 

When a remote storage system 4 has been designated as 
a storage unit targeted for the pair, the remote storage unit 
is detected to carry out establishment of a communication channel 
(1305) . If the remote storage unit cannot be detected (1306) , 
retry processing will be carried out (1307). If the remote 
storage unit cannot be detected after all, it will be responded 
to the host 1 that a failure occurs (1309). In this respect, 
if there has been established a communication channel between 
the storage system 3 and the storage system 4 in advance in 
the design of the system, there will be no need for this series 
of processing. 

When the remote storage unit is detected (1306), the 
communication channel with the remote storage unit will be 
established (1310). Thereafter, if setting of the pair 
management information and establishment of the communication 
channel have been completed (1311), a pair creation command 
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will be transmitted to the storage system 4 (1316). Thus, if 
the storage system 3 receives a response to the pair creation 
command from the storage system 4 (1317, 1318) , a copy manager 
program 113 will set a copying range (1319) to create data for 
being transmitted to the remote storage system 4. Thus, a 
remote I/O processing program 112 will be carried out to transmit 
the data to the remote side, and a copying progress pointer 
will be advanced (1320). On receipt of a completion report 
of the data transmission from the storage system 4, the bit 
map 123 of the transmission portion will be cleared ( "0" ) ( 1321 ) . 

Thus , if it is determined whether or not all the difference 
bit maps 123 are "0" and all is cleared (1322), a pair state 
604 of a pair management table 118 will be registered to "DUPLEX" 
(1323) to return a pair creation completed report to the host 
1 (1324). 

In this respect , when information to the effect that there 
has occurred a defect such as a request to confirm the state 
from the storage system 4 and an error report has returned as 
a response in the establishment of the communication channel 
or in the communication of a command or data between the storage 
system 3 and the storage system 4, or when response time of 
a command is long and the time is over, an error report will 
be returned to the host 1 . 

Next, with reference to FIG. 15, the description will 
be made of a command processing operation during pair creation. 
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Even during pair creation, the storage system 3 receives 
input/output of data from the host 1 and a command to monitor 
a state and the like of other systems at any time. An operation 
of the command processing program 111 for processing a request 
5 to process the I/O at this time will be described. 

On the receipt of the command, the command processing 
program 111 determines whether or not it is a request to process 
a write I/O (1401, 1402). As a result of this determination, 
in the case of the write I/O, it is confirmed whether or not 

10 it is a device ( storage unit ) targeted for pair creation ( 1403 ) . 
If it is the device targeted for pair creation, an address 
targeted for write I/O is prepared with an address of a pair 
difference management pointer (1404), and it is confirmed 
whether or not the write I/O has been transmitted (1405) . If 

15 already transmitted, a predetermined area of the cache memory 
106 will be secured to store the write I/O data (1406) . Thus, 
the pair management program 114 will be called to deliver 
information of the area of the cache memory 106 in which this 
write I/O data has been stored. In order to preferentially 

20 perform transmission processing of the write data to the remote 
side, the pair management program 114 creates the I/O processing 
command and data to the remote side through the use of the pair 
information to transmit the data to the remote second storage 
system 4 through the use of the remote I/O program (1407) . On 

25 receipt of a response to the write completion report from the 
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storage system 4 (1408) , a write processing completion report 
will be returned to the host (1409). 

On the other hand, when it is out of the remote pair target 
(1403N) or when data for pair creation has not yet been 
5 transmitted (1405N) , an area of the cache memory 106 is secured 
to store the data (1411), and thereafter, a report of write 
processing completed will be returned to the host 1 (1409). 

Also, when it is out of the write I/O processing in the 
determination (1402) as to whether or not it is the write I/O, 
10 predetermined processing is performed to return a report of 
processing completed to the host 1 . In the case of , for example , 
read processing, data will be read out of a cache memory or 
a storage unit corresponding to an address targeted for read 
I/O (1421) and after the read data is transmitted to the host 
15 1 , a report of completion will be returned (1422). 

Next, with reference to FIG. 16, the description will 
be made of log acquisition commencement processing on the master 
side . 

If a pair is established between a storage unit 21 in 
20 the storage system 3 and a storage unit 22 in the second storage 
system and a DUPLEX state is brought about, even if error data 
is caused to be transmitted to the remote location because of 
a disaster, the host 1 will transmit a pair suspend command 
and a log data acquisition commencement command to prevent it 
25 from being reflected on the pair on the remote side immediately. 



On receipt of a pair suspend command and a log data 
acquisition commencement command to be transmitted from the 
host 1 (1501), the storage system 3 analyzes the command thus 
received, calls the pair management program 114 to confirm the 
5 log volume group number , the pair state , and the device ( storage 
unit) (1502) , executes the remote I/O program 112 to transmit 
a suspend command and a log data commencement command to the 
remote storage system 4 (1511). 

Subsequently, the storage system 3 waits for receiving 

10 response of log acquisition preparation completed to be 
transmitted from the storage system 4. On receipt of the 
response of preparation completed (1503), a pair management 
program 145 on the storage system 4 side deduces a pair number 
of pair configuration information 118 based on a storage number 

15 concerning a pair indicated to set the state of this pair within 
the log volume group to SUSPEND (1504). Thereafter, a report 
of completion concerning the log acquisition command will be 
returned to the host 1 (1505). 

On the other hand, when response of defect is received 

20 (1521) in place of response of log acquisition preparation 
completed (1503), an error report will be transmitted to the 
host 1 to complete the processing (1522). 

Next, with reference to FIG. 17, the description will 
be made of log acquisition commencement processing on the remote 

25 side. 



On receipt of a pair suspend command and a log data 
acquisition commencement command from the storage system 3 
(1601), the storage system 4 on the remote side analyzes the 
command thus received, and calls the pair management program 
5 145 to confirm the log volume group number, the pair state, 
and the device (1602). 

Subsequently, the storage system 4 on the remote side 
confirms the pair with reference to the volume configuration 
information table 152 to suspend the relevant pair management 
10 information table 153 (1603) , andconfirms whether or not reserve 
for log volume has been prepared. If the reserve for log volume 
is not prepared at this time, a logical storage unit 140 will 
be allocated . Thereafter , a log sequence counter for log volume 
group will be initialized (1604) to set a log volume group 
15 information flag to ON, and a report of completion will be 
transmitted to the storage system 3 (1605). 

Next, with reference to FIGs . 18Aandl8B, the description 
will be made of a processing operation of a MARK command. 

In order for both the host 1 and the storage system 4 
20 to retain the same mark information, a mark command issued from 
the host 1 is transmitted to the storage system 4 through the 
storage system 3 . 

As shown in FIG. 18A, on the host 1 side, AP or DBMS (Data 
Base Management System) of the host 1 calls a mark processing 
25 program 243 after the file is saved, is closed, and AP is saved. 
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and a process of AP is committed among others to issue a mark 
command ( 1701) . On issuing the mark command, a mark processing 
program 243 refers to the mark counter and the timer, and inserts 
the mark ID and the timer value to create the mark data. Thus, 
on receipt of a Ready response from the storage system 3 (1702) , 
the mark data will be transmitted to the storage system 3 ( 1703 ) . 
Thereafter, on receipt of a report of completion from the storage 
system 3 after a series of processing are completed, processing 
of the mark command will be completed (1704). 

Next, with reference to FIG. 18B, the description will 
be made of processing of the MARK command in the storage system 
3. 

A command processing program 111 of the storage system 

3 receives a mark command to be transmitted from the host 1 
(1705) to analyze the command (1706) . If the command is a mark 
command as a result of analysis , a Ready response will be returned 
to the host 1 (1707) . 

The storage system 3 receives mark data or write data 
to be transmitted subsequently to the command from the host 
1 (1708) . Thus, processing responsive to the command received 
will be performed (1709). In the case of the mark command, 
the mark command will be transmitted to the remote storage system 

4 ( 1710 ) . Thus , on receipt of a Ready response from the storage 
system 4 ( 1711 ) , the mark data will be transmitted to the storage 
system 4 (1712) . After the mark data is transmitted, the mark 



data will be processed in the storage system 4. After the 
processing is completed, a report of completion will be 
transmitted to the storage system 3. On receipt of a report 
of completion from the remote storage system 4 (1713), the 
5 storage system 3 will return a report of mark command processing 
completed to the host 1 (1714). 

When the command received is a read command in the previous 
determination in the step 1706 (1715), first hit/miss-hit of 
the cache, that is, the presence or absence of an object address 

10 in the cache memory 106 will be determined (1716). Thus, the 
object data will be read out of the cache memory or the storage 
unit 21 (1718) to transmit to the host 1 (1718). On the other 
hand, if it is not the read command, predetermined processing 
will be performed (1719). 

15 Also, if it is a write command in the determination of 

the above -described step 1709, hit /miss-hit of the cache is 
determined ( 1720) , and the write data is written in the storage 
unit 109 and the cache memory 106 corresponding thereto to be 
registered in the queue of the asynchronous processing (1721) . 

20 Thus, it is determined whether or not it is data of a target 
to be transmitted on the remote side (1722) , and if it is data 
to be transmitted, the procedure will proceed to a step 1710 
to perform the subsequent processing. If it is not remote 
transmission data, a report of completion will be transmitted 

25 to the host 1 to complete. 



Next, with reference to FIG- 19, the description will 
be made of command processing during log acquisition in the 
storage system 4 at the remote site. 

On receipt of a command from the storage system 3 (1801) , 
5 the storage system 4 determines whether it is a mark command 
or a write command, or out of them (1802) . On receipt of the 
mark command, a Ready response to the mark command will be 
returned to the storage system 3 (1803). 

On receipt of a Ready command from the remote side, the 

10 storage system 3 on the master side transmits the mark data 
to the remote location (1712). On receipt of mark data 
subsequently to the receipt of a mark command ( 1804) , the storage 
system 4 on the remote side determines whether or not it is 
a device targeted for log acquisition (logical storage unit) 

15 ( 1805 ) . This determination is performed by referring to tables 
of volume configuration information 152 on the remote side, 
pair management information 153, and log volume group 
configuration information 154 in order. If the target device 
is a device targeted for log data acquisition as a result of 

20 this determination, log data creation processing will be 
performed (1806). In this respect, the log data creation 
processing will be described later with reference to FIG. 20. 
After the completion of creation of log data, a report of 
completion will be returned o the storage system 3 on the master 

25 side (1807). 
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As a result of determination in a step 1802 , on the receipt 
of the read command , processing (1808 to 1812) of the read command 
will be performed, and on the receipt of the write command, 
processing ( 1813 to 1814 ) of the write command will be performed. 
5 Since the above processing is similar to the operation shown 
in FIG. 18 described previously , the description will be omitted. 

Next, with reference to FIG. 20, the description will 
be made of log data creation processing in the storage system 
4. 

10 In the log data creation processing, an address of log 

volume is first set by referring to a log ID management 
information table 157 (1901) , and log ID and a timer value are 
set by referring to the log ID counter 160 and the timer 161 
(1902) . Thus, an area for storing log data is secured within 

15 the cache memory 136 (1903). Thereafter, log data to which 
log information (including log ID1202, log time 1203 and the 
like) has been added to the mark data (including mark ID1211, 
mark time 1212 and the like) as shown in FIG. 13A will be stored 
in an area of the cache memory 136 ( 1904 ) . This log data creation 

20 processing will be added to asynchronous processing later (1905) . 
In other words, by the execution of the asynchronous storage 
I/O processing program, the log data stored in the area concerned 
of the cache memory 136 is stored in the logical storage unit 
140 indicated within the storage unit 23. Thereafter, a report 

25 of completion will be returned to the storage system 3 to 
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complete . 

Next, with reference to FIG. 21, the description will 
be made of excessive log volume capacity processing. 

A log volume group management program 146 monitors 
5 quantity consumed of log volume for each log group. When 
updating due to write I/O or mark I/O occurs, it is reflected 
on the log volume quantity consumed management information 155 
shown in FIG. 10. Further, by referring to the log volume 
quantity consumed management information 155 reflected at this 

10 time (2002), it is confirmed whether or not the quantity consumed 
of the log volume exceeds a specified value (2003). In this 
respect, this specified value has been set through the use of 
the host 1 , or a management unit 8, 9 or a computer system 
management unit 13. As a result of the above- described 

15 determination, if the quantity consumed exceeds the specified 
value, an alert to the effect that the log volume capacity is 
insufficient will be given to the storage system 3 via the 
communication channel 6 (2004) will be given. 

On receipt of this alert, the storage system 3 returns 

20 this alert to the host 1. Or the alert is given to the second 
storage management unit 4 so as to transmit the alert information 
to a computer system management unit 13 or the host 1 from the 
second management unit 9. In this case, the system manager 
instructs the storage system 4 to reflect the log volume. When 

25 giving an instruction from the host 1, an adequate mark ID is 
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instructed by referring to the mark ID management information 
of the host 1 to reflect the log data within the log volume 
on R-VOL for avoiding insufficient volume capacity or 
instructing addition of capacity. On receipt of it , the storage 
5 system 4 allocates a free volume which has been registered in 
volume pool configuration information 156, whereby 
insufficient volume capacity is avoided. 

Next, with reference to FIG. 22, the description will 
be made of take over processing. 

10 This processing is processing to be performed in liaison 

with the host 1 , 2 . 

First, cluster software of the host 2 monitors heartbeat 
with cluster software of the host 1 via a communication channel 
10 (2101). Specifically, cluster software of the host 1 and 

15 the host 2 communicate some data determined at predetermined 
time intervals with each other and response within a certain 
time period is expected. 

When there are no responses to heartbeats a predetermined 
number of times in this monitoring, since a failure of the host 

20 on the other end or a failure in the network communication channel 
is supposed, it is determined to be a heartbeat break (2102) , 
and a communication channel of an alternative system will be 
used to further perform heartbeat (2103). In this respect, 
the communication channel of the alternative system is 

25 preferably separated physically from a communication channel 



of a normal system in order to exhibit the function normally. 

When there is no response even in the communication channel 
of the alternative system (2104) , since there is a possibility 
that there occurs a trouble on the system manager, an inquiry 
5 message for taking over will be given (2104) . When some kind 
of disaster occurs at a certain site and a failure occurs in 
the host 1 , if the host 1 is still in a state capable of performing 
computer processing, the system manager will use the first 
cluster software to execute the take over processing. 

10 Specifically, a command for suspending all remote pairs of the 
storage system 3 will be transmitted to the storage system 3 
to alternate with the second host in processing of the computer 
system 4. On this occasion, the application in the course of 
being processed is suspended and copying processing between 

15 remote locations is suspended (2106). 

The host 2 transmits a command for performing suspend 
processing to the storage system 4. Or if heartbeats between 
the host 2 and the host 1 stop dead for a fixed time period, 
the system manager of the host 2 will inquire about the system 

20 manager of the host 1 to confirm whether or not the host 1 side 
suffers f romadisaster . Whenit has turned out that it suffered, 
or when information of the disaster has been known by mass media 
already, a pair suspend command will be transmitted from the 
host 2 to the storage system 4 to suspend the pair. Thus, the 

25 pair information is set to SUSPEND (2107). 
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However, there is a possibility that processing for 
writing error data is performed because a state of the memory 
for processing information of the host becomes abnormal on 
account of during the disaster among others . Also in this case , 
5 the storage system 3 transmits the data to the storage system 
4. Thereafter, the host 1 or 2 will recover the system through 
the use of the storage system 4. 

Next, with reference to FIG. 23, the description will 
be made of recovery processing. 

10 This recovery processing is processing for data recovery 

which the storage system 4 receives a recovery and restore 
instruction from the host 2 for performing. In this respect, 
the following processing is performed by the storage control 
unit 131 for executing the copy manager program 144 and the 

15 log ID management program (2201). 

There is a possibility that the storage system 4 has 
received, from the storage system 3, data which may probably 
present an failure such as logical mismatching in the host 2 
which performs recovery processing of the host 1. Thus, when 

20 performing recovery processing from the host 2, a request for 
restore processing using an identifier of logical volume to 
be restored, R-VOL and a mark point will be transmitted from 
the host 2 to the storage system 4 through the use of R-VOL 
of the storage system 4 which forms a pair with a storage unit 

25 M-VOL of the storage system 3 and data stored in the log logical 
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storage unit 140 (2202). 

The host 2 confirms the logical storage unit which receives 
the request for restore processing (2203). This is performed 
by transmitting , to the storage system 4 , a command for acquiring 
5 the mark ID management information to acquire the mark ID 
management information. The mark ID management information 
thus acquired is displayed on, for example, a display unit of 
the host 2 or a display unit of the management unit 9, and a 
logical storage unit at the restore target is confirmed by the 

10 system manager (2204). In other words, the system manager 
refers to the mark ID management information displayed to 
determine a recovery point. Thus, the system manager selects 
a mark ID corresponding thereto to instruct through the use 
of the host 2 so as to include it in the content of the recovery 

15 command for transmitting. 

In this case, the system manager of the host 2 is capable 
of selecting any mark ID from the list of mark ID information 
instead of the mark ID immediately before the occurrence of 
failure . Thereby , a systemuser can select any mark ID to thereby 

20 restore the state of R-VOL of the storage system 4 to the point 
of time whereat the mark ID selected has been created. 

The host 2 issues, to the storage system 4, a request 
for restore processing of log data up to the mark ID selected 
at the step 2201 (2205) . In the request for restore processing 

25 which becomes recovery processing, there are included an 



identifier (such as, for example, WWN and LUN) of R-VOL which 
becomes a target of processing for reflecting the log data, 
an identifier for designating a log volume group to which R-VOL 
belongs, information of a mark ID selected, and the like. The 
5 storage control unit 131 of the storage system 4 which has 
received the request for restore processing issued from the 
host 2 executes a system configuration information management 
program 163 and compares the identifier of the log volume to 
be included in the request for restore processing with the log 

1 0 volume group information to confirm whether or not the designated 
log volume is a correct log volume for R-VOL (2206). 

Further, the storage control unit 131 confirms, from the 
content of the request for restore processing, whether 
processing for reflecting the log data is performed on R-VOL, 

15 or a different, not-yet-used storage unit 109 is restored. In 
this respect, if the processing cannot be continued on account 
of an failure of the storage unit 109, the storage control unit 
131 will inform the host 2 to the effect to suspend the processing . 

When restoring data in any other storage unit than the 

20 storage unit 21, the storage control unit 131 secures a data 
storing area in the cache memory 136. Thereafter, the storage 
control unit 131 executes the copy manager program 144 to read 
out the log data in the area secured in the cache memory 136 
in order from the head of the log volume corresponding to R-VOL 

25 (2207). On that occasion, it is confirmed whether or not the 



mark information is included in the log data read out (2208) . 
That is, it is confirmed whether or not a mark flag of the log 
data has become ON. 

When the log data read out is log data including the mark 
5 information, the storage control unit 131 confirms whether or 
not the mark ID to be included in the log data further read 
out is mark ID designated by the host 2 (2209) . When the mark 
ID to be included in the log data is not the mark ID designated 
from the host 2, or when no mark ID is stored in the log data 

10 (when the mark flag (MF) is not ON), the storage control unit 
131 transmits the write data to be included in the log data 
read out so as to write in R-VOL or an address to which the 
other storage unit corresponds. On the other hand, in the case 
of the log data corresponding to the mark ID, the data is not 

15 written in because there is no write data existing (2212). 

Thereafter, the storage control unit 131 returns to the 
step 2207 to read out the next log data. Hereinafter, by 
repeating the processing of 2207 to 2211, the storage control 
unit 131 restores the log data up to the mark ID designated 

20 in an address of the storage unit designated. 

In the above-described step 2209, when the mark ID 
coincides with mark ID designated, the storage control unit 
131 determines that all data to be restored has been written 
in R-VOL or another storage unit 109, and informs the host 2 

25 of the restore processing completed. 
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On receipt of the report of completion from the storage 
system 4 , the host 2 determines that the data up to the point 
of time of mark ID designated by the host 2 has been recovered 
to continue the other processing. On receipt of the response 
5 of the recovery processing completed from the host 2 (2212), 
the storage system 4 completes the processing. 

In the foregoing, the description has been made of one 
embodiment of the present invention, and modification and 
variation of the present invention in various ways is possible 
10 in addition to the above. 

For example, in the above -described example, the 
structure has been arranged such that the log data is stored 
within the storage system 4 at a remote site. In a variation, 
however, the log data may be stored not only on the remote site 
15 side, but also in a storage unit within the storage system 3 
at the master site . In this case , it is apparent that the storage 
system 3 at the master site has also the program and information 
provided for the storage system 4 side shown in FIG. 2. 

Also, a storage unit which becomes the restore target 
20 is not always the storage unit 21 within the storage system 

3 at the master site. When the master site is in a 
disaster-stricken state, there may be used volume 139 within 
the storage unit 139 which is located within the storage system 

4 at a remote site. Or it may be a storage unit within another 
25 storage system connected to the network. 
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Normally, after the log data is restored in the storage 
unit at the restore target, data that the storage unit at the 
master site has retained is handled as a restored one, and 
therefore, the log ID management information 157, the mark ID 
management information 158, the log data and the like up to 
the point of time may be discarded. In order to prevent the 
data from being altered, however, or when there is a regulation 
that it should be left behind as history for a certain time 
period, or the like, the above-describedmanagement information 
and log data may be continuously retained as it is. 



